Am about about to deploy IE7 to a test AD group. I have some GPO user settings that should only be applied to the machines with IE7 installed, can anyone help me with an WMI filter query that I can use within the policy to target IE7 clients only?

Many Thanks
0 Comments   [ + ] Show Comments


Please log in to comment

Rating comments in this legacy AppDeploy message board thread won't reorder them,
so that the conversation will remain readable.


IIRC, MS uses the version number of SHDOCVW.DLL to determine the installed version of IE. The appeal of using the file version is that you get build level detail, etc. For example, the flavour of v6 on my packaging VM is 6.0.2900.3462.

Here's a very basic script for you. I'm afraid I have no clue how you might turn it to use in GP but I figure, if you're asking the question, you'll know:strComputer = "."

Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")

Set colFiles = objWMIService.ExecQuery _
("Select * from CIM_Datafile Where Name = 'c:\\windows\\system32\\shdocvw.dll'")

For Each objFile in colFiles
Wscript.Echo objFile.Version
BTW, there is a separate 'Group Policy' forum for this kind of post.
Answered 04/06/2009 by: VBScab
Red Belt

Please log in to comment
Hi Ian,
Thanks as always for your reply, the SHDOCVW.DLL was a bit unusual as the verison on my IE6 XP SP3 machines is 6.00.2900.5694 whereas my VM machine with XP Sp2 and IE7 is 6.00.2900.3467

So I have gone for the iexplore.exe version which makes it easier to manage as the version matches the product i.e 7.0.5730.13 for IE7

For info the WMI filter within Active Directory looks like this:

NameSpace: root\CIMv2

SELECT path,filename,extension,version FROM CIM_DataFile WHERE path="\\Program Files\\Internet Explorer\\" AND filename="iexplore" AND extension="exe" AND version>"7.0"

Seems to work fine, thanks again for pointing me in the right direction.
Answered 04/07/2009 by: jimmyx
Purple Belt

Please log in to comment
Answer this question or Comment on this question for clarity